💼 AU-3 Content of Audit Records (L)(M)(H)

• Contextual name: 💼 AU-3 Content of Audit Records (L)(M)(H)
• ID: /frameworks/fedramp-low-security-controls/au/03
• Located in: 💼 Audit and Accountability

Description

Ensure that audit records contain information that establishes the following:

a. What type of event occurred;

b. When the event occurred;

c. Where the event occurred;

d. Source of the event;

e. Outcome of the event; and

f. Identity of any individuals, subjects, or objects/entities associated with the event.

Similar

• Sections
  • /frameworks/nist-sp-800-53-r5/au/03
  • /frameworks/fedramp-high-security-controls/au/03
• Internal
  • ID: dec-c-0fb4acaf

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 FedRAMP High Security Controls → 💼 AU-3 Content of Audit Records (L)(M)(H)	1		20
💼 NIST SP 800-53 Revision 5 → 💼 AU-3 Content of Audit Records	3	13	20

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (6)

Policy	Logic Count	Flags
📝 AWS Account Multi-Region CloudTrail is not enabled 🟢	1	🟢 x6
📝 AWS API Gateway API Access Logging in CloudWatch is not enabled 🟢	1	🟠 x1, 🟢 x5
📝 AWS API Gateway API Execution Logging in CloudWatch is not enabled 🟢	1	🟢 x6
📝 AWS CloudTrail S3 Bucket Access Logging is not enabled. 🟢	1	🟢 x6
📝 AWS S3 Bucket Server Access Logging is not enabled 🟢	1	🟢 x6
📝 AWS VPC Flow Logs are not enabled 🟢	1	🟠 x1, 🟢 x5